The Netcraft Anti-Phishing Extension is now available for Microsoft Edge.

Netcraft anti-phishing extension on Microsoft Edge.

The Netcraft Anti-Phishing Extension provides phishing and XSS protection as well as informing you about the websites you visit. It was first made available for Internet Explorer in December 2004, followed by Firefox in 2005, Chrome in 2012 and Opera in 2013. Microsoft Edge is now supported with the arrival of the extension in the Windows Store. The extension is compatible with the current version of Microsoft Edge (34+) as well as the preview version available at Microsoft Edge Insider.

The extension displays a website's hosting provider, country, longevity and popularity, along with an abstracted risk rating for each site. Its key features are:

• Protection against phishing sites — the Netcraft anti-phishing community is effectively a giant neighbourhood watch scheme, empowering the most alert and most expert members to defend everyone within the community. As soon as the first recipients of a phishing mail report it, Netcraft blocks it for all users of the extension, providing an additional level of protection from phishing. Netcraft processes reports of fraudulent URLs from a variety of sources and proactively searches for new fraudulent sites.
• Detailed site reports — simply click the Netcraft logo to access a wealth of information about the sites you visit, helping you to make informed choices about their safety.
• Risk ratings — we evaluate the characteristics of the site compared against those depicted by fraudulent sites. The result is a simple visual summary displayed on the site report.
• Convenient reporting for suspected phishing & fraudulent sites — at the click of the button you can report suspected web forgeries to Netcraft, helping to protect the community. Netcraft operates an incentive scheme for phishing site submissions, including iPads, backpacks, mugs, and more. As of July 2019, over 65 million phishing sites have been detected and blocked by Netcraft since its anti-phishing service was launched.
• Protection against cross site scripting (XSS) — the extension optionally traps XSS and other suspicious URLs which contain characters highly likely to deceive.

Left: Microsoft Edge without the Extension - Right: The Netcraft Extension blocking page

The extension is now available to download from the Microsoft Store and once installed will automatically start blocking malicious sites. It is also available from the Google Chrome Store, Opera add-ons page and the Firefox add-ons page.

Netcraft has also released apps for iOS and Android, which protect your mobile device from phishing attacks.

GoDaddy had the most reliable hosting company site in June 2019; it responded to all of Netcraft's requests with an average connection time of just 4ms. GoDaddy provides a wide range of hosting and domain registration services, including its widely used website builder software, which provides customers with a simple way to create a web presence.

The next seven most reliable sites also responded to all of our requests, and are separated in the ranking by their average connection time. This puts Rackspace in a close second place, with an average time of 5ms. This is the fifth consecutive month with Rackspace placing in the top 10, topping the list twice in that time. Rackspace offers a range of managed dedicated and cloud hosting solutions.

Webair came third this month, following an appearance at the top of the chart in May. Webair provides a range of services including managed hosting solutions and high performance cloud environments.

Linux continues to be the dominant choice of operating system among the top 10, powering nine of the ten sites this month. SmartOS also makes an appearance at 4th place.

Netcraft measures and makes available the response times of around twenty leading hosting providers' sites. The performance measurements are made at fifteen minute intervals from separate points around the internet, and averages are calculated over the immediately preceding 24 hour period.

From a customer's point of view, the percentage of failed requests is more pertinent than outages on hosting companies' own sites, as this gives a pointer to reliability of routing, and this is why we choose to rank our table by fewest failed requests, rather than shortest periods of outage. In the event the number of failed requests are equal then sites are ranked by average connection times.

Information on the measurement process and current measurements is available.

In the June 2019 survey we received responses from 1,333,421,275 sites across 236,991,999 unique domain names and 8,840,331 web-facing computers. This reflects gains of 6.76 million sites, 1.98 million domains, and 113,000 computers.

nginx has further extended its lead in the hostnames metric, with 52.2 million additional sites pushing its total up to 440 million. Since overtaking Apache in April, nginx has already built up a 4.89 percentage point lead over Apache's market share and is not far off accounting for more than one third of all sites.

Apache retains the lead in all other metrics, but for how long? The proportion of unique domains that are served by Apache has fallen to 30.1%, while nginx snapped up the majority of this month's net domain growth, bringing its share to within 3.4 percentage points of Apache's. There has been a clear trend of Apache's domain market share decreasing, while nginx's increases and looks likely to overtake Apache within a year. A similar trend is evident in web-facing computers and among the top million sites, so it may not be long before nginx steals more of the limelight.

Reports of a remote code execution vulnerability in most recent versions of nginx were downplayed by its developers, who claimed that neither of the two overflow vulnerabilities appeared to be generally exploitable. Both bugs affected the njs scripting language implementation that allows nginx's functionality to be extended; one bug was fixed in njs 0.3.2, which was released on 21 May along with nginx 1.17.0, while the other bug is expected to be fixed in the future release of njs 0.3.3.

Several other product updates were also released during May, including NGINX Unit 1.9.0, lighttpd 1.4.54, LiteSpeed Web Server 5.3.8 (Stable), OpenLiteSpeed 1.5.1, and cPanel & WHM 80. The latest version of cPanel & WHM adds the ability to run Node.js applications, manage API tokens to allow resellers and third-party developers to run API functions, and ensure visitors are redirected to the secure HTTPS versions of sites.

Envoy – the open source edge and service proxy for cloud-native applications, which leapt to prominence in last month's survey – remains in tenth place with around 5 million sites, which are spread across 2.7 million unique domain names.

Cloudflare's web server has moved up into fifth place after gaining more than 5 million websites, giving it a total of 35.1 million sites across 12.9 million domains. The Cloudflare server is used by the edge nodes of Cloudflare's content delivery network, which now serves 2.6% of all sites in this month's survey.

Microsoft saw losses in every metric this month, apart from web-facing computers, where it made a gain of 13,600; however, this was not enough to stop its market share falling slightly, while Apache gained 17,300 computers and nginx gained 64,000.

Webair had the most reliable hosting company site in May 2019, responding to all of Netcraft's requests, and with an average connection time of 78ms. Webair provides a range of services including managed hosting solutions and high performance cloud environments.

The next three most reliable hosting company sites also responded to all of Netcraft's requests in May 2019 and were separated by average connection time. Swishmail, Pair Networks and One.com were placed second, third and fourth with average connection times of 90ms, 92ms and 94ms. Swishmail is a New York based hosting and email solutions provider.

The remaining six sites that make up the top 10 each failed to respond to one request. Choopa.com appears in fifth with the fastest average connection time among the top 10 of 6ms. Choopa.com has appeared in the top 10 every month so far in 2019, and has had the most reliable hosting company site twice in that period.

Linux continues to be the predominantly used operating system, powering eight of the top ten sites. FreeBSD makes an appearance in second place with Swishmail and SmartOS appears in eighth with EveryCity.

Netcraft measures and makes available the response times of around twenty leading hosting providers' sites. The performance measurements are made at fifteen minute intervals from separate points around the internet, and averages are calculated over the immediately preceding 24 hour period.

From a customer's point of view, the percentage of failed requests is more pertinent than outages on hosting companies' own sites, as this gives a pointer to reliability of routing, and this is why we choose to rank our table by fewest failed requests, rather than shortest periods of outage. In the event the number of failed requests are equal then sites are ranked by average connection times.

Information on the measurement process and current measurements is available.

Read this article in English

La bijouterie en ligne française CLEOR, active dans 136 bijouteries, a été infectée d’un skimmer JavaScript. Le code malveillant injecté est conçu pour envoyer les données bancaires aux criminels sur le formulaire de paiement en ligne légitime de Cleor.

Presently, the most impersonated UK institution is not a bank nor a Government department, but the Daily Mirror, which is used to promote cryptocurrency scams.

The scale of these cryptocurrency scams is substantial, such that there are currently more fake Daily Mirror front pages than PayPal phishing login forms.

An example is an article on how Richard Branson would bring "Financial Freedom for ALL UK Residents".

Fraudsters impersonate news websites to deliver cryptocurrency scams.

The general theme of these articles is how readers are able to make a small deposit into a cryptocurrency platform and leverage their algorithms to make easy money. The generally well-worded articles provide step-by-step instructions on how a reader is able to deposit their money and withdraw their supposed profits. The link at the end of these instructions typically takes the victim to a professional-looking site operated by the fraudster where they are directed to deposit their money.

Each article provides step-by-step instructions detailing how deposits can be made

In general, these scams are sophisticated, make use of Geo-blocking, and serve localised content depending on the country of the reader. By visiting these sites from many different locations, we found that numerous news outlets are impersontated. For example, when visiting one of the scams from a German IP address, a German language article is served referencing Der Spiegel and Bild. When visiting from the US and Canada, a diet product scam is served instead of the cryptocurrency scam site. No scams are served when visiting from Russian IP addresses.

The scams serve country-specific content and content targeted at certain demographics

Scams like these have attracted the attention of the UK's Financial Conduct Authority (FCA). In collaboration with Actionfraud, the FCA discovered a rise in the number of fraudulent online trading platforms [1]. The reported number of cryptocurrency and foreign exchange scams more than tripled in the 2018/19 financial year from 530 than 1,834. Many of the reported claims related to cryptocurrency scams.